$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft File: WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft (raw, json) Hash identifier: BHEtQYEKym8txw+ovQ4GJ9Tp7spaUz8ZWyVsYs/eBCA= Subject key identifier: 3C:CC:73:89:16:7C:91:3C:D4:73:C9:4B:61:70:18:B6:94:60:65:FF Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 01967C4554795B44BCA22738972B603DF937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft Manifest number: 1525 Signing time: Mon 28 Apr 2025 12:00:40 +0000 Manifest this update: Mon 28 Apr 2025 12:00:40 +0000 Manifest next update: Tue 29 Apr 2025 12:00:40 +0000 Files and hashes: 1: 4hbMBM1nzDwcq0Z5poawjitTY60.roa (hash: XP1CU+CY23GAE6mFffgmeePRICbliFurLSIMPRQ5f40=) 2: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (hash: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=) 3: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (hash: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=) 4: 9IywKX9fS2qo6y4BwiBKFOJ_RRo.roa (hash: Ac1uBlsnhCZRDyKHF7yrUh45o1zwGsvgTvH8xD0tKfw=) 5: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (hash: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=) 6: GKke9u-g19ORaszjeZzhH6pAcUM.roa (hash: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=) 7: Ig1WTTEJWSAB8ImVaoKPLwHQgbc.roa (hash: UMRsVJllHBv632Y31OJYoImld0QNRvOFUdYe6AzQydE=) 8: IwPxKQ0cH2VtiVJXXV7lwrIiVdY.roa (hash: Vp7I9HovJoiuEC9VCO+6KWFaSrjYJto9LxrxlUDp/FE=) 9: N5rVf1hY_OzEZp1xY8pg3j4it1A.roa (hash: Ue3CSgwWVTQ+G81bsGOQJFm164xkm8Ru6ylUCKhvmpA=) 10: PcjnIOs0xHAadMUPf6vwApxUGPI.roa (hash: ahUECt5ec83Dg9RUG/tnn3VXtR+x9lfVVXmvWME9edo=) 11: SOIu77MViH9HrW2wOhBa4ctl-s4.roa (hash: EeJItN2QFTFRmLAW0Mvz7rV5W+XgeuLcsUy4tvkAsoI=) 12: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (hash: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=) 13: TaAWX6RunIkoavVYyto4LyLZbsg.roa (hash: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=) 14: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (hash: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=) 15: WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl (hash: HfhfGNpO9KhQa0CrVcnOy9lVreYlXzFMj+aNggyla1U=) 16: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (hash: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=) 17: Wj9UBZ8lyGpizZyCVs5Soop7w2k.roa (hash: nghObD8IVMMvgf7Cs34GYm/ZtGFtMr/E9cOGO8F0TDk=) 18: dy952eRiBCdIkDatCGm3tM-NtSw.roa (hash: oIhly5TECVRnL4ipTnAWtgg017FDltluQ713TVuz5pw=) 19: j8S8_OZUpxB9k7LHRFPXRAKfkWU.roa (hash: k8mQUf/NuQPokL0zcpiZfvFdtMY/J1/bRRQuRB+KB/M=) 20: qMr-LBReCBqYRhVBoJttXFZAERs.roa (hash: +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=) 21: skag_VnN9GBJjb3tko75iVexHSM.roa (hash: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=) 22: sqtDA5C4zTAF8EU1UanGLhNGqBE.roa (hash: mht2D+EpFezejVvclFV759gknFNR6V1vy0XD94YDkwU=) 23: vWXWhkktZWC2_i0zKz5vdi-IvuE.roa (hash: D7lRMIA1f5sBgefITMxbK3yGHotRr10qyY6m4yVQx28=) 24: xPuYo9ZNVfEwjuZRks156sTPvCs.roa (hash: jIHvOq1mFiR09GABf7ziDZ9sAzswkVSjcgAC+i6z4yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7c:45:54:79:5b:44:bc:a2:27:38:97:2b:60:3d:f9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Apr 28 12:00:40 2025 GMT Not After : Apr 29 12:00:40 2025 GMT Subject: CN=3ccc7389167c913cd473c94b617018b6946065ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:3a:74:fc:86:7f:f2:33:09:b7:1c:28:f7: 7b:af:40:dc:72:59:f9:c5:5b:36:11:62:db:d0:f2: 7e:8f:3a:0a:e9:1e:de:60:70:02:0a:51:1a:09:b1: 76:a5:db:95:b0:89:52:20:5a:7d:b1:ed:a2:38:bc: 0c:54:ac:9e:4c:f7:a1:f7:b2:6f:58:7a:a5:64:d6: 99:1c:be:d1:92:eb:0e:c4:6a:9c:53:39:ef:e9:ea: 2f:74:27:cf:ee:e0:a2:43:59:48:f3:86:66:6e:ae: a2:c0:37:af:70:67:f7:e4:fa:3b:20:87:e0:e3:ed: e6:41:33:cd:c1:4d:b9:7a:3e:fc:36:2f:2c:f3:9c: 8a:de:01:b6:d3:67:dc:ec:be:22:f8:db:a9:2b:3a: 2a:0c:0f:80:dc:69:b6:98:5e:09:a5:27:1e:cd:b3: f1:2f:e3:12:c2:a3:86:4a:54:c5:f7:37:7a:3a:23: da:5e:77:69:d6:7e:7b:f7:7a:e6:29:26:ec:82:f3: 0c:b8:f1:45:9a:72:bf:83:82:7e:fe:44:c9:08:a3: 57:fa:36:82:47:f4:18:b1:63:0d:23:2f:88:80:48: cc:ff:3c:db:87:f3:90:b9:08:f0:26:99:a8:79:1d: 9b:04:a6:c0:ba:86:bf:09:c0:50:a5:51:e4:ba:c9: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CC:73:89:16:7C:91:3C:D4:73:C9:4B:61:70:18:B6:94:60:65:FF X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:67:0d:56:ad:61:be:4f:85:53:99:d7:d9:88:25:32:1a:7a: 7d:88:cd:a4:7d:e3:1b:63:1b:4f:ac:fa:44:96:a5:3a:bc:23: 44:c6:56:ab:86:aa:9a:2d:9a:32:fe:72:bf:79:c8:82:63:89: 80:ed:a0:4c:24:84:b4:c6:8e:9d:60:d4:38:73:00:88:a3:0e: 79:08:91:80:13:35:f4:a2:b0:13:67:5e:f0:0a:80:e2:dd:d0: b3:2d:06:c4:b4:67:e9:2a:7a:65:1a:d5:61:a2:96:b9:a4:3f: 93:89:2d:d5:15:05:0e:f7:24:bd:e4:ce:bb:bf:9b:ac:6c:17: ef:2d:a3:45:48:04:57:a0:89:e2:66:aa:17:31:07:e1:f8:f9: 1f:aa:6d:2a:03:c2:f5:36:7d:ff:f6:8d:fc:f8:63:30:0e:17: 20:f7:ad:2e:37:51:5f:06:04:4c:30:c7:8d:a0:4a:c3:7f:5d: 62:75:5d:ad:1e:ec:7b:6c:9f:c7:ad:6d:2e:93:99:31:9b:c1: b3:05:17:43:2e:82:9f:0e:23:f4:c0:ec:9e:18:34:d5:14:13: fa:d2:ff:22:77:2b:01:76:3c:78:0a:80:fd:5e:dc:a3:43:69: 99:de:fc:27:c0:e2:87:6a:e9:48:cd:44:70:1b:0e:46:d2:92: 55:6a:77:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ8RVR5W0S8oic4lytgPfk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjUwNDI4MTIwMDQwWhcNMjUwNDI5MTIwMDQwWjAzMTEwLwYDVQQD EygzY2NjNzM4OTE2N2M5MTNjZDQ3M2M5NGI2MTcwMThiNjk0NjA2NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywI6dPyGf/IzCbccKPd7r0Dccln5 xVs2EWLb0PJ+jzoK6R7eYHACClEaCbF2pduVsIlSIFp9se2iOLwMVKyeTPeh97Jv WHqlZNaZHL7RkusOxGqcUznv6eovdCfP7uCiQ1lI84Zmbq6iwDevcGf35Po7IIfg 4+3mQTPNwU25ej78Ni8s85yK3gG202fc7L4i+NupKzoqDA+A3Gm2mF4JpScezbPx L+MSwqOGSlTF9zd6OiPaXndp1n5793rmKSbsgvMMuPFFmnK/g4J+/kTJCKNX+jaC R/QYsWMNIy+IgEjM/zzbh/OQuQjwJpmoeR2bBKbAuoa/CcBQpVHkusmeowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzMc4kWfJE81HPJS2FwGLaUYGX/MB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGcNVq1h vk+FU5nX2YglMhp6fYjNpH3jG2MbT6z6RJalOrwjRMZWq4aqmi2aMv5yv3nIgmOJ gO2gTCSEtMaOnWDUOHMAiKMOeQiRgBM19KKwE2de8AqA4t3Qsy0GxLRn6Sp6ZRrV YaKWuaQ/k4kt1RUFDvckveTOu7+brGwX7y2jRUgEV6CJ4maqFzEH4fj5H6ptKgPC 9TZ9//aN/PhjMA4XIPetLjdRXwYETDDHjaBKw39dYnVdrR7se2yfx61tLpOZMZvB swUXQy6Cnw4j9MDsnhg01RQT+tL/IncrAXY8eAqA/V7co0Npmd78J8Dih2rpSM1E cBsORtKSVWp36g== -----END CERTIFICATE-----Generated at Mon Apr 28 22:44:31 2025 by rpki-client